Pentesting Tools: Mobile - Paiet/SEC-335 GitHub Wiki

Mobile tools
- Drozer
  - Android Security Framework
    - Like the Metasploit for Android
      - https://github.com/mwrlabs/drozer
- APK studio
  - Integrated Development Environment(IDE) for Android apps
    - Can be used for reverse engineering purposes
  - Download
    - https://developer.android.com/studio/
    - Create first app
      - https://developer.android.com/training/basics/firstapp/
- APKX
  - A python wrapper for popular free dex converters and Java decompilers
    - Extracts Java source code directly from the APK
  - .dex (Dalvik Executables)
    - Compiled executables for Android
      - Then zipped into a .apk
        
        More: https://source.android.com/devices/tech/dalvik/dex-format.html
  - DEMO from my Mac OS